TI-2018-11603 CVE-2018-16206 · GHSA-2pfr-hv6x-5c36Cross-site scripting in Yohsuke Ohkouchi spam-byebyePriority LOW 29Cross-site scripting vulnerability in WordPress plugin spam-byebye 2.2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00952 · Published 2019-01-13 · No fix listed CWE-79